Examkin

Question

Difficulty: MediumCloud Architecture and Deployment Models

An enterprise organization is migrating its core billing application to a public cloud using an Infrastructure as a Service (IaaS) deployment model. Which of the following security tasks remain the direct responsibility of the enterprise customer within this framework? (Select TWO.)

  1. Hardening guest operating systems and configuring host-level firewallsAnswer
  2. Configuring identity access controls and defining resource authorization policiesAnswer
  3. C
    Applying firmware updates to physical server blades and hypervisors
  4. D
    Assuming identity authentication automatically satisfies resource authorization without configuring access rules

Answer

The customer is responsible for hardening guest operating systems and host-level firewalls, as well as configuring identity access controls and resource authorization policies.
Under the cloud shared responsibility model for Infrastructure as a Service (IaaS), the cloud provider manages the physical datacenters, server hardware, and virtualization hypervisors. The customer retains full ownership and operational responsibility for guest operating systems, software patching, host-based security controls, and user access authorization.

Step-by-Step Solution

1
Analyze the specified cloud deployment model
Identified Infrastructure as a Service (IaaS) as the service model in scope.
Under IaaS, the Cloud Service Provider (CSP) manages physical facilities, hardware host infrastructure, and hypervisor software, while the customer manages virtual machines, operating systems, applications, and data.
2
Evaluate operating system and network responsibilities
Selected guest operating system hardening and host firewall management as customer duties.
Because the customer provisions and maintains the virtual machine environment in IaaS, OS patching and local firewall configuration rest entirely on the customer.
3
Evaluate identity and data control responsibilities
Selected identity access management and resource authorization policy configuration as customer duties.
User access management, data classification, and authorization rules remain customer responsibilities across all cloud models (IaaS, PaaS, SaaS).

Key Concept

Cloud Shared Responsibility Model (IaaS)
Rate this question

Topics

Cloud Architecture and Deployment Models

More questions from this topic